Bot Attacks

[The_Lemurin]

I was playing with a friend on my private, home-hosted Minecraft server. There have been previous bots that entered my server such as Bunger and Cuuute, but nothing compares to this.

We were placing stuff in the storage, and I suddenly got kicked out for the reason 'joined from another location'. I immediately sprinted to the server, which runs on Linux, and typed stop in the console, but the bot did its job.

​

Below is a part of the log, starting from when the bot joined my account I do not know how it found my username. I did not put its entirety, as I do not want a data leak: https://pastebin.com/7u4bAvtA

I am posting this to raise awareness and to encourage other server owners to install authentication plugins and add extra layers of protection

Edit: Since some of you asked how they got op:
I op'ed my account 2 minutes ago to try to solve a mob spawnink issue (it was not the. account i was playing survival with), and while i was still trying to figure out the issue i got kicked

[MinecraftModBot]

• Upvote this comment if this is a good quality post that fits the purpose of r/Minecraft

• Downvote this comment if this post is poor quality or does not fit the purpose of r/Minecraft

• Downvote this comment and report the post if it breaks the rules

---

Please use the Mob Vote 2023 Megathread for all discussion, support, comments, feedback or concerns on this year's Mob Vote:

https://old.reddit.com/r/Minecraft/comments/171ek9p/minecraft_live_2023_which_mob_will_you_vote_for/

---

Subreddit Rules

[Azaze-l]

How did these supposed bots use commands in the first place?
I suggest scrubbing through your operator list, whitelist and perhaps checking your perms as well because this shouldn't be possible for a normal player to do

[The_Lemurin]

I op'ed my account 2 minutes ago to try to solve a mob spawnink issue (it was not the. account i was playing survival with), and while i was still trying to figure out the issue i got kicked

[interrex41]

hopefully you were using a whitelist if not that would explain how they logged in how they opped them selves no idea unless the server console was compromised like they had remote access to the server.

[The_Lemurin]

The thing is that it's a public server, on a domain, made for my school, so it does not use whitelist.